bump to 0.8.10

upgrade `axios@^0.28.0` for CVE-2023-45857
TheNorthMemory · Feb 14, 2024 · d8fe421 · d8fe421
1 parent b4199d0
commit d8fe421
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,9 @@
 # 变更历史
 
+## v0.8.10 (2024-02-14)
+
+- 升级依赖 `axios@^0.28.0` for the CVE-2023-45857;
+
 ## v0.8.9 (2024-02-12)
 
 - 取消对`axios/lib/utils`的依赖。

diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "wechatpay-axios-plugin",
-  "version": "0.8.9",
+  "version": "0.8.10",
   "description": "微信支付APIv2及v3 NodeJS SDK，支持CLI模式请求OpenAPI，支持v3证书下载，v2付款码支付、企业付款、退款，企业微信-企业支付-企业红包/向员工付款，v2&v3 Native支付、扫码支付、H5支付、JSAPI/小程序支付、合单支付...",
   "main": "index.js",
   "typings": "index.d.ts",
@@ -51,7 +51,7 @@
   "author": "James ZHANG",
   "license": "MIT",
   "dependencies": {
-    "axios": "0.21.2 - 0.27",
+    "axios": "^0.28.0",
     "xml2js": "0.5 - 0.6"
   },
   "peerDependencies": {